Evidence document location

[Zind]

Hello, 

In Vancouver, 

1. Could somone tell me which table stores the Evidence collected from the Control Attestation? And if this table can be made visible in the navigation panel or other place? 

2. Is there another GRC Soluton to considere to store Evidence from control owners? Like a repository site where control owners can see what was submitted last year and then update as needed for the new audit year.  

Thanks 

[MP12 · Accepted solution]

Hello Zind,

1/ The control attestation results are displayed through the UI page "assessment_take2". 

if you need to have all, the results are stored in "asmt_metric_result" table, and in "sys_attachment" for the evidence which would need to be filtered by table name ="asmt_metric_result" and table sys ID of the result to find the related attachment. 

2/ you can consider also create a assessment question requesting an URL to another storage where you could also manage the access from one year to another to avoid any modification of past attachments.